Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/8e3406-633c-4f29-98f4-ad6f6a693ac6/1/FZVEc2Bfo00pH7dD2kFeVdaSINY.mft
File:                     FZVEc2Bfo00pH7dD2kFeVdaSINY.mft (raw, json)
Hash identifier:          hznFCKJo12bZwZJNEM3XceYPPCri6YBJc6eDBLH5ARk=
Subject key identifier:   F8:55:CE:28:4E:0B:40:B9:90:60:55:CF:B7:6C:BD:94:4D:F7:29:69
Authority key identifier: 15:95:44:73:60:5F:A3:4D:29:1F:B7:43:DA:41:5E:55:D6:92:20:D6
Certificate issuer:       /CN=15954473605fa34d291fb743da415e55d69220d6
Certificate serial:       0193568A4010BC63BD0A9444449A07000334
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FZVEc2Bfo00pH7dD2kFeVdaSINY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/8e3406-633c-4f29-98f4-ad6f6a693ac6/1/FZVEc2Bfo00pH7dD2kFeVdaSINY.mft
Manifest number:          0551
Signing time:             Sat 23 Nov 2024 01:02:01 +0000
Manifest this update:     Sat 23 Nov 2024 01:02:01 +0000
Manifest next update:     Sun 24 Nov 2024 01:02:01 +0000
Files and hashes:         1: FZVEc2Bfo00pH7dD2kFeVdaSINY.crl (hash: FnZVecxO3o8HsDoSep7EXlZ52/UYWT9WOGVh5pXeoMI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/54/8e3406-633c-4f29-98f4-ad6f6a693ac6/1/FZVEc2Bfo00pH7dD2kFeVdaSINY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/54/8e3406-633c-4f29-98f4-ad6f6a693ac6/1/FZVEc2Bfo00pH7dD2kFeVdaSINY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FZVEc2Bfo00pH7dD2kFeVdaSINY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 01:02:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:8a:40:10:bc:63:bd:0a:94:44:44:9a:07:00:03:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15954473605fa34d291fb743da415e55d69220d6
        Validity
            Not Before: Nov 23 01:02:01 2024 GMT
            Not After : Nov 24 01:02:01 2024 GMT
        Subject: CN=f855ce284e0b40b9906055cfb76cbd944df72969
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:73:c9:96:76:5d:a7:0f:7a:38:0c:0b:72:47:
                    ee:9e:71:75:82:69:97:79:6d:8d:b8:8f:7a:86:cf:
                    8b:43:68:b6:28:fe:2b:57:2d:e9:db:97:b6:da:a1:
                    3f:91:ae:bf:bb:86:ff:4a:26:9c:3e:a4:a3:a4:1b:
                    57:e7:e8:b5:fe:22:51:ec:5c:c7:4c:a6:dc:43:d6:
                    ec:fe:ac:5e:dd:93:ab:84:9f:9f:6d:7d:cc:e1:b0:
                    3c:b1:dc:8b:c2:a2:c9:a8:d4:b6:b1:5a:e3:00:c0:
                    2c:e1:a3:e1:6f:b3:7a:8e:52:d8:71:fb:c0:57:46:
                    a5:17:54:ad:98:98:dc:aa:f7:32:ee:5f:00:0a:00:
                    1e:09:8d:58:eb:a6:23:e1:73:29:63:6e:97:59:c3:
                    fa:3a:c6:ad:f4:f6:08:2b:d9:31:14:cc:c0:90:ee:
                    81:f0:b7:14:fa:ad:33:c7:ca:0d:2b:38:34:c1:2e:
                    45:34:ff:a7:4f:a1:b0:a4:18:55:5e:31:af:d7:8b:
                    11:80:5c:2c:0b:0f:80:58:57:0a:22:a0:3f:ad:89:
                    2e:72:fe:c8:62:f2:6a:97:4e:0a:40:ed:33:3b:ac:
                    74:f7:81:84:1c:c6:a7:e0:84:06:b9:c9:27:ee:0d:
                    ce:94:dc:67:38:bf:45:fa:a1:3d:96:49:04:82:08:
                    a0:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:55:CE:28:4E:0B:40:B9:90:60:55:CF:B7:6C:BD:94:4D:F7:29:69
            X509v3 Authority Key Identifier:
                keyid:15:95:44:73:60:5F:A3:4D:29:1F:B7:43:DA:41:5E:55:D6:92:20:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FZVEc2Bfo00pH7dD2kFeVdaSINY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/8e3406-633c-4f29-98f4-ad6f6a693ac6/1/FZVEc2Bfo00pH7dD2kFeVdaSINY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/8e3406-633c-4f29-98f4-ad6f6a693ac6/1/FZVEc2Bfo00pH7dD2kFeVdaSINY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:2c:8b:81:ae:91:ff:06:d6:f1:d8:94:9e:0e:92:4b:c9:66:
         ad:6c:a4:14:f9:81:79:48:51:c5:03:64:00:8e:49:79:c9:ef:
         6d:6c:23:d9:0c:70:cf:64:ed:cb:57:10:0a:e0:ed:df:f6:ee:
         df:d3:20:27:6e:c3:57:eb:45:7c:cb:fa:2e:ae:5b:1b:e0:9c:
         72:33:7f:3f:a6:3b:7c:1f:2e:a0:d5:81:ad:c6:30:84:aa:b8:
         6b:e3:f4:37:0b:3d:9f:35:82:7c:29:35:97:6a:e3:82:de:96:
         0f:4f:59:7b:97:e2:61:ff:58:d1:84:bd:94:cf:be:93:e8:ed:
         75:12:b6:80:09:09:ff:74:79:7e:f5:23:b7:f9:f0:99:66:6b:
         d3:88:b1:91:3a:e1:d2:6e:a2:57:c3:6c:d7:e2:13:15:a3:c0:
         e8:0e:41:e8:17:07:ff:d3:45:b1:d3:b7:00:a5:c5:b0:a9:9a:
         39:ae:2f:76:60:2e:bb:f5:e9:c2:4a:8e:05:10:c5:c1:b9:99:
         b2:78:42:a5:e9:15:c3:b4:43:ad:53:04:dd:f2:c9:68:1e:a5:
         a5:ab:cb:15:3d:17:4c:6c:b0:25:63:c9:6e:13:e2:2f:6c:33:
         bb:f6:fe:f5:3d:69:d9:8c:76:34:08:b3:c8:eb:35:86:f9:28:
         84:b0:34:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----